diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 6513dfa..9e4818d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -87,7 +87,7 @@ jobs:
         with:
           go-version-file: go.mod
 
-      - uses: sigstore/cosign-installer@v3.5.0
+      - uses: sigstore/cosign-installer@v3.6.0
 
       - uses: anchore/sbom-action/download-syft@v0.17.0
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 48f7330..8cfef3b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -46,7 +46,7 @@ jobs:
         with:
           go-version-file: go.mod
 
-      - uses: sigstore/cosign-installer@v3.5.0
+      - uses: sigstore/cosign-installer@v3.6.0
 
       - uses: anchore/sbom-action/download-syft@v0.17.0